This IP address has been reported a total of
100
times from
55 distinct
sources.
104.28.154.252 was first reported on
, and the most recent report was
.
Recent Reports:
We have received reports of abusive activity from this IP address within the last week. It is
potentially still actively engaged in abusive activities.
{"ClientAddr":"104.28.154.252:41739","ClientHost":"104.28.154.252","ClientPort":"41739","ClientUsern ...
show more{"ClientAddr":"104.28.154.252:41739","ClientHost":"104.28.154.252","ClientPort":"41739","ClientUsername":"-","DownstreamContentSize":12917,"DownstreamStatus":403,"Duration":172763946,"OriginContentSize":12917,"OriginDuration":166590245,"OriginStatus":403,"Overhead":6173701,"RequestAddr":"www.cleveradmin.de","RequestContentSize":132,"RequestCount":1555023,"RequestHost":"www.cleveradmin.de","RequestMethod":"POST","RequestPath":"/wp-login.php","RequestPort":"-","RequestProtocol":"HTTP/1.1","RequestScheme":"https","RetryAttempts":0,"RouterName":"cleveradmin-www-websecure@file","ServiceAddr":"172.16.80.10:80","ServiceName":"cleveradmin-www@file","ServiceURL":"http://172.16.80.10:80","StartLocal":"2026-07-20T02:29:39.965891816+02:00","StartUTC":"2026-07-20T00:29:39.965891816Z","TLSCipher":"TLS_AES_128_GCM_SHA256","TLSVersion":"1.3","entryPointName":"websecure","level":"info","msg":"","time":"2026-07-20T02:29:40+02:00"}
{"ClientAddr":"104.28.154.252:41739","ClientHost":"104.28.154.252","Clien
...
show less
Blocked by CSF 13 firewall - Rule: WPLOGIN
US/United States/-
Web App Attack
Anonymous
Bot / scanning and/or hacking attempts: GET /wp-admin/index.php HTTP/1.1, GET /wp-login.php?redirect ...
show moreBot / scanning and/or hacking attempts: GET /wp-admin/index.php HTTP/1.1, GET /wp-login.php?redirect_to=https%3A%2F%2Fkulktrucks.nl%2Fwp-, POST /wp-login.php HTTP/1.1
show less